Scan yarn/npm/pnpm lockfiles for compromised packages from the Shai-Hulud npm supply-chain attack.

An extremely efficient, highly scalable, all-in-one, easy to setup cryptocurrency pool server

Environment agnostic nextTick polyfill

Check whether a string is a URL.

The official runtime utils for Standard Schema

Node.JS path module

UI framework for Lodash UI

Full zlib module for the browser

A security scanner that detects npm packages compromised by supply chain attacks, including the TanStack wave 4 attack (May 2026), the Axios attack (March 2026), and Shai-Hulud malware.

Returns true if the value is an object and not an array or null.

process information for node.js and browsers

Define a non-enumerable property on an object. Uses Reflect.defineProperty when available, otherwise Object.defineProperty.

Hono security middleware: honeypot path blocker and mini WAF that stops vulnerability scanners (nuclei, nikto, sqlmap, dirbuster, wpscan), bad bots, and brute-force probes before they reach your routes. Optional IP strike/ban plus AbuseIPDB reporting. Zer

Deprecate all the things

No-payment x402 public-surface checker for manifests, OpenAPI specs, and HTTP 402 challenges.

Secure-by-default MCP server with 5-layer validation for defense-in-depth protection

Mirror of mkdirp 0.5.2

Client-side library to load the Paystack checkout form

Pluralize and singularize any word

Fast and simple xml generator. Supports attributes, CDATA, etc. Includes tests and examples.